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Abstract. We prove that the family of embezzlement states defined by van Dam and Havden[26] 
is universal for both quantum and classical entangled two-prover non-local games with an arbitrary 
number of rounds. More precisely, we show that for each e > and each strategy for a fc-round 
two-prover non-local game which uses a bipartite shared state on 2m qubits and makes the provers 
win with probability uj, there exists a strategy for the same game which uses an embezzlement 
state on 2m + 2m je qubits and makes the provers win with probability lo — \/2e. Since the value 
of a game can be defined as the limit of the value of a maximal 2m-qubit strategy as m goes to 
infinity, our result implies that the classes QMIP* g [2,k] and MIP* s [2,k] remain invariant if we 
allow the provers to share only embezzlement states, for any completeness value c € [0, 1] and any 
soundness value s < c. Finally we notice that the circuits applied by each prover may be put into 
a very simple universal form. 

1 Introduction 

A fc-round non-local game is an interactive procedure involving a referee, and two provers Alice and Bob. 
At each round the referee randomly selects two questions drawn from finite sets and sends one of them 
to each prover. Subsequently, each of the provers replies to her/his question. Alice and Bob are assumed 
to be in distinct locations and not to be able to communicate. In this way, none of them knows which 
question was sent to the other. At the end of the last round, the referee evaluates a publicly known 
predicate which depends on the whole history of questions and answers. The provers win if the predicate 
evaluates to true. The value of a non-local game is defined to be the maximum winning probability of 
Alice and Bob. 

The importance of non-local games is twofold. On one hand they are intimately connected with 
multi-prover interactive proof systems jB]. In these systems a polynomial time verifier must decide the 
membership of a string x in a language L through an interactive protocol involving several provers which 
are not allowed to communicate. We say that a language L has a fc-round two-prover interactive proof 
system if there exists a polynomial time function which assigns to each x a fc-round game G x in such a 
way that if x is in L then the value of the game G x is above a threshold c, while if x is not in L, the 
value of the game G x is below a threshold s for s < c. We refer to c as being the completeness of the 
system, and to s as being its soundness. 

On the other hand, by allowing the provers to share a quantum system prepared in an arbitrary 
entangled state, non-local games become a suitable formalism to describe experiments that unveil the 
inherent non-locality of quantum mechanics. Following Bell's [4] observation that some predictions of 
quantum mechanics are inconsistent with local hidden variables theories, several experiments were pro- 
posed with the aim to provide a decisive test between quantum mechanics and hidden local variables 
theories. As an example, in the CHSH game which is based on a thought experiment of Clauser, Home, 
Shimony and Holt [5], Bell's work implies that if the provers are classical the value of the game is 0.75 
while if we allow the provers to share entanglement, there is a strategy which achieves a value of ~ 0.85. 
In other examples of games, like the Kochen-Specker game [TH1 and the Mermin-Peres magic square 
game [HI [2J [53] , any classical strategy is doomed to fail with some probability while there is a quantum 
strategy which always allows the provers to win. 

When dealing with interactive proof systems it is customary to impose limits on the computational 
power of the verifier, while the provers are assumed to be at most limited by the laws of physics. In 
this sense, it is reasonable to consider interactive proof systems in which the provers are allowed to 
share arbitrary quantum states. The study of how entanglement may affect the decidability properties 
of two-prover interactive proof systems was initiated by Cleve, Hoyer, Toner and Watrous jlOj . They 
provide several examples of proof systems whose soundness is violated if we allow the provers to share 



an entangled state. Furthermore they provide evidences that entanglement may significantly interfere in 
the decidability properties of multi-prover interactive proof systems. Let ©M/P CiS [2, 1] denote the class 
of languages which can be decided by two prover interactive proof systems in which the final decision 
of the verifier is taken solely based on the XOR of the 1-bit answers of the provers, and @MIP* s [2, 1] 
be its entangled version. Cleve et al. [10] show that ®MIP* s [2, 1] C EXP, while in the classical case, 
it follows from works of Hastad [13] and Bellare, Goldreich and Sudan [5] that ®MIP C>S [2, 1] = NEXP 
for certain completeness and soundness values. Indeed, by combining a result of Wehner [37] and Jain, 
Upadhyay and Watrous [H], it is possible to refine the first inclusion to ®MIP*[2, 1] C P SPACE. Thus 
unless, P SPACE — NEXP entanglement indeed can weaken the decidability properties of XOR games. 
Entangled non local games were generalized and studied as well in the scenario in which the verifier is 
allowed to be quantum [T5J [T7] . In particular, some positive aspects of entanglement are explored in 
[16] . where the authors provide some evidence that prior entanglement may be useful for honest provers. 

In order to make the study of entangled games slightly easier, it is reasonable to ask whether the 
bipartite state shared by the provers may be restricted to a class of states which is easy to describe and 
to work with. The aim of this work is to show that the embezzlement family of states defined by van 
Dam and Havden[2l)]. satisfy these criteria. More precisely, in Theorem [5] we prove that the family of 
embezzlement states is universal for two-prover non-local games with any number of rounds, in the sense 
that any strategy for a two-prover non-local game which yields a value ui may be replaced by a strategy 
for the same game that uses an embezzlement state and that yields a value of at least oj — \^2e for any e 
with < e < 1 with only a linear, in 1/e, overhead on the number of qubits to be shared. Since the value 
ui of a game can be defined as the limit of the value of a maximal 2m-qubit strategy as m goes to infinity, 
this implies that uj itself is not changed when only embezzlement states are considered. As a consequence, 
the classes QMIP* s [2, fc] and MIP* S [2] remain invariant through our restriction (Corollary [T}. Finally, 
as an observation, we note in Theorem [3J that the circuits applied by the provers may also be put into a 
very simple universal form. 

While in the classical case a series of results [3] [20] [11] [12] established the relation MIP[2, k] = 
MIP[2, 1] = NEXP for any fc, in the setting in which the provers share entanglement it makes sense 
to consider interactive proof systems with an arbitrary number of rounds because in this case it is not 
known whether MIP*[2, k] = MIP*[2, 1] for k > 2. It is also worth noting that the embezzlement family 
has been already considered (and generalized to any constant number of provers) by Leung, Toner and 
Watrous [21] and used to prove that if we allow the referee to be quantum, then there are one-round 
games whose value cannot be achieved by means of strategies that share a finite amount of entanglement. 
Nevertheless, the embezzlement family seems to have passed unnoticed as a universal family of states 
for non-local games, and in some of the literature concerning entangled multiprover interactive proof 
systems, the existence of such family is implicitly stated as an open problem |18) . 

The rest of this paper is organized as follows: In Section [2] we provide a formal definition of non-local 
games. In Section[3jwe introduce van Dam and Hayden's embezzlement family and prove our universality 
results (Theorems [5] and [3] and Corollary [TJ. 

2 Non-Local Games 

A fc-round two-prover non-local game is an interactive procedure undertaken by a verifier and two provers 
which we call Alice and Bob. The game proceeds as follows: Given two sets of questions S and T, two 
sets of answers A and B, and a predicate V C S k x T k x A k x B k , at round i the verifier choses a pair 
of questions (si,ii) 6SxT accordingly to a probability distribution m defined on S x T and sends the 
question Sj to Alice and the question fj to Bob. Alice replies with an answer a, € A and Bob replies with 
an answer G B. The provers win the game if the history (si...Sfc, t%...tk, a\...a,k, b\...bk) of all questions 
and answers satisfies the predicate V. The goal of the provers is to follow a strategy that maximizes 
their winning probability. We note that the probability distribution 717 with which the verifier choses 
the questions at round i may depend on the questions and answers from previous rounds. We denote a 
fc-round non-local game by G = (V, ir) where it is a set of probability distributions over S x T 

7r = {-K i (si...s i ,ti...ti,a 1 ...a i ,bi...bi)\l < i < k - 1} (1) 

The provers' strategies can be described by Positive Operator Valued Measurements (POVM's). 
Formally, a POVM in <D" with outcomes in I is a family of n-dimensional operators M — {Mi\i^x 
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satisfying ^MjMi = I n , where /„ is the identity in (D n . Measuring a quantum system prepared in a 
state \ip) <E C" according to M, yields the outcome i with probability (iI>\mJ Mi\ip) and post-measurement 
state Mi\ip)/{ip\M}Mi\ip) [23- 

In a quantum strategy, the provers share a quantum register consisting of 2m qubits prepared in 
a bipartite state \ip) € (D 2 <£> (D 2 in such a way that each prover holds m of the qubits. The state 
shared by the provers can be assumed to be pure, for if it were mixed, we could simply consider a 
pure state in a higher dimensional Hilbert space. For each question Si G S and history of questions 
and answers (si...Sj_ i, ai...aj_i), Alice has a POVM {X^'"^ , ~^ , } ai eA with outcomes in A. Similarly, 
for each question ti € T and history of questions and answers (ti...ij_i, 6i...6j_i), Bob has a POVM 
|-^rbi...6,_i|6,|^^^ with outcomes in B. In a slight abuse of notation we simply write {X^} ai<£ A and 

{Y t . i }b i eB whenever the history of the previous rounds is clear. A strategy on 2m-qubits is completely 
determined by a triple (\ip) 2m ,X, Y) where \ip) is the shared state, X is the collection of all POVM's of 
Alice and Y of all POVM's of Bob. Let \ip) = j^i) be the initial state shared by the provers and \4>i) 
be the state shared by the provers at the i-th round. The probability with which Alice and Bob reply 
respectively ai and hi at the «-th round when questioned with si and U is given by 

(il>i I ® Y^yXf* ® Y t b ; | Vi) (2) 

and the new state becomes 

(in | (Xs- ® if W ® *#M> ' 

As a convention we let boldface letters range over fc-tuples of elements 
b 6 _B fe . The value of the strategy (\ip),X,Y) for the game is defined as 

k k 

lv g (W),X,Y)= ^(s»t>a,b)n^(si,*i)n^l( X ^® y ^) tX ^® y *i < l^)' ( 4 ) 

s,t,a,b i— 1 z— 1 

which by using Equations ([2]) and ([3]) , can be rewritten explicitly as a function of the initial shared 
state \ip) as 



(3) 

: s € S k , t e T fe , a e A fc and 



WG (|^ 2m ,V,V)= ^ 

s,t,a,b 



V(s,t,a,b) Jj7Tj(si,^) 



(5) 

The entangled value of G is defined as the limit of the maximum value among all n-qubit strategies 
as n goes to infinity. 

w%= lim max ^(li/.)^, , V, V). (6) 

Non-local games can be further generalized to the case in which the verifier has quantum capabilities. 
In this case the communication with the provers proceeds through the exchange of quantum registers. 

Definition 1 (Quantum Entangled Non-Local Games). A k-round 2-prover entangled quantum 
game G(Vi, Vfc) is defined by a verifier strategy (V\, Vk, Vk+i) where each Vi is a quantum circuit 
acting on three quantum registers: A private quantum register privy and two quantum communication 
registers comx and corny ■ A Im-qubit strategy for G consists of a bipartite quantum state \ip) € C 2 <g> 
C 2 , and two sequences of quantum circuits X = (Xx, Xk) and Y = (Yi, Y&) (prover's circuits), 
where each X{ acts on the quantum communication register comx and on a private quantum register 
privx, and each Yi is a quantum circuit acting on the communication register corny and on a private 
quantum register privy . 

The game proceeds as follows: At the start, privy, comx and corny are initialized to |0) while privx 
and privy are initialized to the bipartite state \ip). The j-th round of the game consists in the application 
of the circuit Vj followed by the application of Xj and Yj to their respective registers. After the k-th 
round, Vh+i is applied and the first private qubit q of the verifier is measured in the computational basis. 
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The quantum value cj q (\ip) 2 , X, Y) of a strategy (\ip) 2m , X,Y) is denned as the probability with 
which the measured qubit q is |1). Similarly to the classical entangled case, the value of a fc-round 
quantum game G = (Vi, Vk, Vk+i) is defined as 

uj q r = lim max uj%,(\ip) 2m , X,Y). (7) 

In the most general case, the circuits corresponding to both the verifier and the provers may contain any 
kind of physically realisable operations. However such circuits may be efficiently simulated by quantum 
circuits consisting only of unitary operations followed by a single measurement pQ. Furthermore, by 
considering higher dimensional Hilbert spaces, we may assume that the state shared by the provers is 
pure. 

Classical entangled games may be cast as a subclass of quantum entangled games: Each verifier circuit 
consists of a measurement of the communication registers comx and corny in the computational basis, 
followed by the application of a permutation of the basis states. The formulation of classical entangled 
two-prover non-local games in terms of predicates is more natural, and allow us to define the value 
of the entangled game by a closed formula, which is completely circuit independent. Nevertheless the 
reformulation of classical entangled games as a special case of quantum entangled games is more suitable 
for the goals of this paper. In particular, the proof of Theorem [5] turns out to be much simpler in this 
setting. 

Definition 2 (Quantum (Classical) Entangled Multiprover Interactive Proof Systems). A 

language L over an alphabet S can be decided by a k-round quantum (classical) entangled two-prover 
interactive proof system with completeness c and soundness s if there exists a deterministic polynomial 
time algorithm P that on input x £ S* constructs the description of the circuits of a quantum (classical) 
entangled k-round two-prover non-local game G = (Vi, Vk, Vk+i), such that if x G L then io q G > c 
(wq > c) and if x ^ L then uiq < s (ujq < s). 

We denote by QMIP* s [2, k] and MIP* s [2, k] the classes of all languages that have a quantum, resp. 
classical, entangled fc-round two-prover interactive proof system with completeness c and soundness s. 



3 Universality of the Family of Embezzlement States 

Embezzlement states were defined in j^S] as follows: 



3=1 J 

Let \ l 4 > ) 2n ~ Si=i a i\@i)\9i) be a bipartite 2m-qubit state written according to its Schmidt decompo- 
sition. Then the state \(J>) <B) \ip) admits a Schmidt decomposition of the form 

J2^i\mm\0i) (9) 

Let 7 J - 1) t 1 > Jj 2 ,i 2 > ••• > IjN-iN be the N = 2" largest coefficients of the above Schmidt decomposi- 
tion. Then define the n — th embezzled version of to be the state 

\m))2na m ^^\jrm\e ir )\6 lr ). (10) 

We note that Alice and Bob may transform the state \n) 2n into the state \E(ip)) 2n 2m by performing 
only local operations and without communication. First each prover prepares a local ancilla register of 
size m in the state |l) m , so that \/j) 2n becomes \n) 2n <8> |l) m |l) m - Subsequently both Alice and Bob 
apply a unitary U that maps each basis state |j)„|l) m to the basis state | jr) n \8i r ) m , thus transforming 
l/ i )2n ® |l) m |l)m m *° I^W0)2n 2m' Surprisingly, as stated in the next theorem, by increasing n the state 
\E(i>)} 2n 2m can be made arbitrarily close to \fi) 2n ® \i } )2m- 



1 1 

|M>2„ = pS~77l^nli>n 



c = 



\ 



4 



Theorem 1 (Embezzlement [26j). Let \ip) 2m = ELi^l^)!^) be 

a 2m qubit bipartite state written 

according to its Schmidt decomposition, e be such that < e < 1; and n, m € N be such that n > — . 
Then «/i| 2 „ ® (V-| 2m )I^W) 2 „, 2m > 1 - £• 

To show our main theorem, we need some more notation: The trace distance between two states 
and |0) in € n is defined as D(\ip),\<f>}) = ^tr\(\i/}} (ip\ - \4>)(4>\)\ where \A\ = y/WA. If {Mi} ieX is a 
POVM with outcomes in I and pi = (tp\Mj Mi\ip) and qi = {4>\Ml Mi\<f>) are the probability distributions 
induced by the measurement on \ip) and \<j>) respectively, then D{pi,qi) < D(\ip) ,\<fi}) where D(pi,qi) — 
\ Tlii \Pi ~ Qi\ 1S the classical total variance distance between the probability distributions pi and qi (see 
for example theorem 9.1 of 23 for a proof). In other words if two quantum states are close in trace 
distance, then any measurement performed on those states will give rise to probability distributions 

which are close in the classical sense. Also it can be proved that D(\ip) ,\(f))) < J 1 — (ip\4>) 2 and thus if 

> 1 - e, then D(\i/>),\<f>)) < y/2e. 
Next we prove our main theorem. It says that the value of a quantum strategy for a quantum entangled 
non-local game in which the provers share a pure state \ip) on 2m qubits can be arbitrarily approximated 
by the value of a strategy in which the provers share an embezzlement state. Since classical entangled 
games can be regarded as a special case of quantum entangled games, Theorem [2] holds also in the 
classical entangled setting. 

Theorem 2. Let (|"0) 2m , X, Y) be a Im-qubit quantum strategy for a k-round two-prover non-local game 
G(Vi, Vk, Vk+i). Then for any e with < £ < 1 there exists a 2m(l + \ je)-qubit strategy (|/i) 2m / e ® 
|1> Jl> m **'.n that u q G (\n) 2m/e \l)Jl) m ,X',V) > u q G {\i>) 2m ,X,Y) - ^2e. 

Proof. Let (|/u) 2m / e ® IV') 2m !^7^) be a strategy for G where \fJ,) 2m /e ^ s the embezzlement state and 
X and Y are obtained by tensoring each circuit in X and each circuit in Y with the identity on m/e 
qubits acting on half of the qubits of \fj) 2m/e - Then clearly u} G (\fi) 2m/e <»\tp) 2m , X, Y) = u) G (\i;) 2m ,X,Y). 
By Definition [TJ the interplay of the verifier's strategy with the provers's strategies, prior to the final 
measurement of the verifier, may be regarded as the application of a single unitary [/gtoa pure state. Let 
l-^W^m/e 2m ^ e the embezzled version of \tp) as defined in Equation (flU)) and set \<j>) = C^g|£ ; (V')) 2 „ 1 / £ 2m 
and \4>') = U G \fi) 2m/e ® \ip). Since by Thcorcm[U {{^\ 2m / E<2m ® (^\ 2 J\E{^)) 2m/ ^ 2m > 1 - e, we have 
(010') > 1 — £ and the trace distance D(\ip),\<f>)) < \f2e. Let {Mi} ie x be the POVM measurement 
made by the verifier in the end of the fc-th round and let pi = (<p\Mj Mi\(f>) and q. L = (<fi'\Mj Mi\(f>') . 
Then D(p l ,q l ) < D(|0),|0')) < % /2e. Finally there is a unitary U such that U ® U\E(ip)) 2m/e 2m = 
lA*) 2m / e ® l-Oml-Om w here one of the U's acts on Alice's qubits and the other on Bob's qubits. Then the 
final strategy is (\n) 2m/£ , 2m , X' , Y 1 ) where X' = UXW and Y' = UYW . □ 

As pointed out in the introduction, Leung, Toner and Watrous [21] showed that there are quan- 
tum entangled games whose value is never attained by a strategy whose shared state has a constant 
number of qubits, and thus the limit in Equation ([7} is fundamental. It is still not known whether 
the same situation holds for classical entangled games. Despite the fact that Theorem [5] concerns only 
strategies with a finite number of qubits, it is still possible to prove that the limit in Equations [5] and 
[7] does not change if we consider only embezzlement states. This in particular implies that the classes 
QMLP* s [2, k] and MLP* s [2, k] remain invariant if we allow the provers to share only embezzlement 
states. Let QMIPj? a [2,k] (MIP E [2, As]) be the class of languages that can be decided by quantum 
(classical) entangled fc-round two-prover interactive proof systems whose provers are only allowed to 
share embezzlement states. 

Corollary 1. For any completeness value c £ [0,1] and any soundness value s < c, QMLPf s [2,k] 
(MIP®*[2,h]) is equal to QMIP* s %k] (MIP* s [2,k]). 

Proof. Let L be a language in QMIP* S [2, k] (MIP* S [2, k]). It is enough to prove that for any x E L the 
value of the game G x associated to x remains the same if we restrict the state shared by the provers to 
belong to the embezzlement family. Since the proof holds both for classical entangled and for quantum 
entangled games, we write simple wg, for the value of G x . If ujq w is reached by a strategy in which the 
provers share a finite dimensional state \ip} 2m , then by Theorem [5] there exist a sequence of strategies 
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sharing states |/z) 2n ® |l) m |l) m whose value approaches ujq x as n — > oo. Now suppose that there is no 
finite dimensional strategy whose value is ujq^, and let W2)k>4, -, w 2mi ••• be an infinite sequence where 
U2m is the maximum value among strategies sharing a quantum states on 2m qubits. Then by Theorem 
[2j for any two such consecutive values U2(m-i) and w 2m, and for a small enough e, there exists a strategy 
on 2(1 + l/e)m qubits whose value ui > u)% m — \f2e is between ui 2 ( m -i) and io 2m - O 

In Theorem [3] we state a dual of Theorem [5] which says that the circuits applied by the provers can 
be put into a universal form. 

Theorem 3 (Universal Strategy). For each k and each e > there is a universal set of k-round 
circuits {{Xm, 3^m)}msn such that for each k-prover non-local game G and each strategy (\tp) 2m ,X, Y), 
there is a M £ N and a state 2m \A) m\B) m , such that 

^G(H) 2m \A) M \B) M ,X M ,y M )>cj G (\^) 2m ,X,Y)-s. 

Proof. Any unitary matrix acting on d qubits can be e- approximated by a circuit with poly(2 d , log 1/e) 
gates from the universal set of gates {CNOT,H,n/8} [7 j. By adding the SWAP gate to this set, such 
circuits can be put into a nearest neighbor configuration, in which the CNOT and SWAP operate only 
on adjacent pair of qubits. Alice and Bob hold two registers each: one working register with d = m + v 
qubits, where v is the size of the communication register with the verifier, and an ancilla register of 
size M — k ■ poly(2 d , log k/e) divided into k regions with equal number of qubits. Each prover regards 
the state of the j-th region of her/his ancilla register as a program which will determine the unitary 
that will be applied to her/his working register at the j-th round. More precisely, each prover applies 
a circuit of the form CmCm-\...C\ where each Cj is a controlled gate which applies one of the four 
gates SWAP, CNOT, I® H or I® 7r/8 to qubits 2i{ mod d) and 2i + 1( mod d) Q of the working register 
depending whether the state of qubits 2i and 2% + 1 of the ancilla register is |00), |01), |10) or |11) 
respectively. For some configuration of \A), \B) of the ancillae registers of Alice and Bob respectively, 
each unitary in Xm (resp. J^m) will be e/k-dose to its corresponding unitary in X (resp. Y). Since there 
are k rounds and the errors accumulate additively, ojg{\iP)\A)\B) , Xm ^m) > X,Y) — e. □ 
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